Skip to content

chore(deps): bump the rust-dependencies group with 9 updates - #5471

Merged
jedel1043 merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-4871246449
Aug 8, 2026
Merged

chore(deps): bump the rust-dependencies group with 9 updates#5471
jedel1043 merged 1 commit into
mainfrom
dependabot/cargo/rust-dependencies-4871246449

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 8, 2026

Copy link
Copy Markdown
Contributor

Bumps the rust-dependencies group with 9 updates:

Package From To
base64 0.23.0 0.23.1
clap 4.6.4 4.6.5
http 1.4.2 1.5.0
rustls 0.23.42 0.23.43
time 0.3.54 0.3.55
trybuild 1.0.118 1.0.120
intrusive-collections 0.10.2 0.10.3
timezone_provider 0.2.4 0.2.5
temporal_rs 0.2.4 0.2.5

Updates base64 from 0.23.0 to 0.23.1

Changelog

Sourced from base64's changelog.

0.23.1

  • Make the tests build again on non-SIMD architectures
Commits

Updates clap from 4.6.4 to 4.6.5

Release notes

Sourced from clap's releases.

v4.6.5

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Changelog

Sourced from clap's changelog.

[4.6.5] - 2026-07-31

Fixes

  • (help) Correctly mark which value_names are optional with num_args
Commits
  • c8c9355 chore: Release
  • af74def docs: Update changelog
  • c96f222 Merge pull request #6368 from truffle-dev/fix/fish-env-escaping
  • 49a05cd fix(complete): Two-pass quote fish env-completer
  • e791004 test(complete): Snapshot fish env quoting cases
  • See full diff in compare view

Updates http from 1.4.2 to 1.5.0

Release notes

Sourced from http's releases.

v1.5.0

What's Changed

New Contributors

Full Changelog: hyperium/http@v1.4.2...v1.5.0

Changelog

Sourced from http's changelog.

1.5.0 (July 29, 2026)

  • Add Method::QUERY constant for the new QUERY method defined in RFC 10008.
  • Fix uri::Builder::path_and_query() to allow empty strings to mean no path.
  • Fix uri::PathAndQuery parsing to enforce URI max length.
Commits

Updates rustls from 0.23.42 to 0.23.43

Commits
  • fcf61cd Prepare 0.23.43
  • f0dad4c Check server's proposed suite against actual offer
  • b480cc6 Test for server choosing a non-QUIC TLS1.3 suite
  • 883a44d Consider Protocol in ServerConfig::supports_version
  • c2f1fd9 Check suitability of server version in QUIC client
  • d98e1b9 Add test for server Tls13RequiredForQuic
  • e63d9bf Bound ticket age calculation
  • 79cd462 Defensiveness improvement for binder suffix arithmetic
  • 4a9f025 use checked_sub for the mac tag offset in Rfc5077Ticketer::decrypt
  • 3131e5c Accept that libcrux deps are vulnerable
  • Additional commits viewable in compare view

Updates time from 0.3.54 to 0.3.55

Release notes

Sourced from time's releases.

v0.3.55

See the changelog for details.

Changelog

Sourced from time's changelog.

0.3.55 [2026-08-01]

Fixed

  • Avoid underflow in DateIter::nth, ensuring correct behavior.
  • Avoid overflow when deserializing timestamps.
  • Handle out-of-bounds data when deserializing.
  • Don't assume that the format being deserialized was generated by the serializer; this previously led to some valid values being parsed incorrectly and others being rejected.
  • No longer silence errors when deserializing UtcOffset.
  • OffsetDateTime::from_unix_timestamp_nanos and UtcDateTime::from_unix_timestamp_nanos correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
  • OffsetDateTime::checked_to_offset and UtcDateTime::checked_to_offset correctly return None for all out-of-range values, rather than unexpectedly panicking in some situations.
Commits
  • 857d9c4 v0.3.55 release
  • 2b72fcd Precise feature gating for macro
  • c1089eb Run check-targets, miri in parallel
  • f377fad Avoid range-validated ordinal => year in cascade
  • 2eacb0a Report miscellaneous tasks, overall status
  • 29621ac Speed up CI
  • 08de7ba Fix nano-timestamp validation
  • 3c3f046 Fix copy-paste error
  • 3c0c81c Cascade errors when deserializing UtcOffset
  • c21acd5 Handle more deserializations of SignedDuration
  • Additional commits viewable in compare view

Updates trybuild from 1.0.118 to 1.0.120

Release notes

Sourced from trybuild's releases.

1.0.120

  • Collect more path dependencies from dev deps and target deps (#340)
  • Prefer longest match in path dependency search (#341, #342)

1.0.119

Commits
  • 2adc265 Release 1.0.120
  • bc87f59 Merge pull request #342 from dtolnay/longestdep
  • 85d74ec Accept snapshots with original path dep behavior
  • a20999d Merge pull request #341 from dtolnay/longestdep
  • cf672ed Prefer longest match in path dependency search
  • 8661abc Merge pull request #340 from dtolnay/morepathdep
  • 527ecc9 Accept old snapshots without more path dependencies
  • de08a76 Collect more path dependencies from dev deps and target deps
  • 3ce9ec5 Raise required compiler to Rust 1.88
  • a065cd4 Release 1.0.119
  • Additional commits viewable in compare view

Updates intrusive-collections from 0.10.2 to 0.10.3

Commits

Updates timezone_provider from 0.2.4 to 0.2.5

Release notes

Sourced from timezone_provider's releases.

v0.2.5 release

What's Changed in v0.2.5

Full Changelog: boa-dev/temporal@v0.2.4...v0.2.5

Changelog

Sourced from timezone_provider's changelog.

What's Changed in v0.2.5

Full Changelog: boa-dev/temporal@v0.2.4...v0.2.5

Commits

Updates temporal_rs from 0.2.4 to 0.2.5

Release notes

Sourced from temporal_rs's releases.

v0.2.5 release

What's Changed in v0.2.5

Full Changelog: boa-dev/temporal@v0.2.4...v0.2.5

Changelog

Sourced from temporal_rs's changelog.

What's Changed in v0.2.5

Full Changelog: boa-dev/temporal@v0.2.4...v0.2.5

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the rust-dependencies group with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [base64](https://github.com/marshallpierce/rust-base64) | `0.23.0` | `0.23.1` |
| [clap](https://github.com/clap-rs/clap) | `4.6.4` | `4.6.5` |
| [http](https://github.com/hyperium/http) | `1.4.2` | `1.5.0` |
| [rustls](https://github.com/rustls/rustls) | `0.23.42` | `0.23.43` |
| [time](https://github.com/time-rs/time) | `0.3.54` | `0.3.55` |
| [trybuild](https://github.com/dtolnay/trybuild) | `1.0.118` | `1.0.120` |
| [intrusive-collections](https://github.com/Amanieu/intrusive-rs) | `0.10.2` | `0.10.3` |
| [timezone_provider](https://github.com/boa-dev/temporal) | `0.2.4` | `0.2.5` |
| [temporal_rs](https://github.com/boa-dev/temporal) | `0.2.4` | `0.2.5` |


Updates `base64` from 0.23.0 to 0.23.1
- [Changelog](https://github.com/marshallpierce/rust-base64/blob/master/RELEASE-NOTES.md)
- [Commits](marshallpierce/rust-base64@v0.23.0...v0.23.1)

Updates `clap` from 4.6.4 to 4.6.5
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](clap-rs/clap@clap_complete-v4.6.4...clap_complete-v4.6.5)

Updates `http` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/hyperium/http/releases)
- [Changelog](https://github.com/hyperium/http/blob/master/CHANGELOG.md)
- [Commits](hyperium/http@v1.4.2...v1.5.0)

Updates `rustls` from 0.23.42 to 0.23.43
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](rustls/rustls@v/0.23.42...v/0.23.43)

Updates `time` from 0.3.54 to 0.3.55
- [Release notes](https://github.com/time-rs/time/releases)
- [Changelog](https://github.com/time-rs/time/blob/main/CHANGELOG.md)
- [Commits](time-rs/time@v0.3.54...v0.3.55)

Updates `trybuild` from 1.0.118 to 1.0.120
- [Release notes](https://github.com/dtolnay/trybuild/releases)
- [Commits](dtolnay/trybuild@1.0.118...1.0.120)

Updates `intrusive-collections` from 0.10.2 to 0.10.3
- [Commits](https://github.com/Amanieu/intrusive-rs/commits)

Updates `timezone_provider` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/boa-dev/temporal/releases)
- [Changelog](https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md)
- [Commits](boa-dev/temporal@v0.2.4...v0.2.5)

Updates `temporal_rs` from 0.2.4 to 0.2.5
- [Release notes](https://github.com/boa-dev/temporal/releases)
- [Changelog](https://github.com/boa-dev/temporal/blob/main/CHANGELOG.md)
- [Commits](boa-dev/temporal@v0.2.4...v0.2.5)

---
updated-dependencies:
- dependency-name: base64
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: clap
  dependency-version: 4.6.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: http
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: rust-dependencies
- dependency-name: rustls
  dependency-version: 0.23.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: time
  dependency-version: 0.3.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: trybuild
  dependency-version: 1.0.120
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: intrusive-collections
  dependency-version: 0.10.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: timezone_provider
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
- dependency-name: temporal_rs
  dependency-version: 0.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: rust-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label Aug 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 8, 2026 08:09
@dependabot dependabot Bot added the C-Dependencies Pull requests that update a dependency file label Aug 8, 2026
@github-actions github-actions Bot added the Waiting On Review Waiting on reviews from the maintainers label Aug 8, 2026
@github-actions github-actions Bot added this to the v1.0.0 milestone Aug 8, 2026
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown

Test262 conformance changes

Test result main count PR count difference
Total 53,125 53,125 0
Passed 51,073 51,073 0
Ignored 1,482 1,482 0
Failed 570 570 0
Panics 0 0 0
Conformance 96.14% 96.14% 0.00%

Tested main commit: 66971821a38953a3eaa9f8f60e441c699fb3a7af
Tested PR commit: 3174e3bae35f1eece5b6b2375ed640eb5bfe8644
Compare commits: 6697182...3174e3b

@jedel1043
jedel1043 added this pull request to the merge queue Aug 8, 2026
Merged via the queue into main with commit 2efcfcf Aug 8, 2026
21 checks passed
@jedel1043
jedel1043 deleted the dependabot/cargo/rust-dependencies-4871246449 branch August 8, 2026 19:02
@github-actions github-actions Bot removed the Waiting On Review Waiting on reviews from the maintainers label Aug 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

C-Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant